Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-3718

An authenticated command injection vulnerability exists in the AOS-CX command line interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands on the underlying operating system as a privileged user on the affected switch. This allows an attacker to fully compromise the underlying operating system on the device running AOS-CX.

Published

2023-08-01T19:15:09.947

Last Modified

2024-11-21T08:17:54.727

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Primary
    CWE-77
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System hpe arubaos-cx ≤ 10.10.1050 Yes
Operating System hpe arubaos-cx ≤ 10.11.1010 Yes
Hardware hpe aruba_cx_10000-48y6 - No
Hardware hpe aruba_cx_4100i - No
Hardware hpe aruba_cx_6000_12g - No
Hardware hpe aruba_cx_6000_24g - No
Hardware hpe aruba_cx_6000_48g - No
Hardware hpe aruba_cx_6100 - No
Hardware hpe aruba_cx_6200f - No
Hardware hpe aruba_cx_6200f_48g - No
Hardware hpe aruba_cx_6200m - No
Hardware hpe aruba_cx_6200m_24g - No
Hardware hpe aruba_cx_6300m_24p - No
Hardware hpe aruba_cx_6300m_48g - No
Hardware hpe aruba_cx_6405 - No
Hardware hpe aruba_cx_6410 - No
Hardware hpe aruba_cx_8320-32 - No
Hardware hpe aruba_cx_8320-48p - No
Hardware hpe aruba_cx_8325-32c - No
Hardware hpe aruba_cx_8325-48y8c - No
Hardware hpe aruba_cx_8360-12c - No
Hardware hpe aruba_cx_8360-16y2c - No
Hardware hpe aruba_cx_8360-24xf2c - No
Hardware hpe aruba_cx_8360-32y4c - No
Hardware hpe aruba_cx_8360-48xt4c - No
Hardware hpe aruba_cx_8360-48y6c - No
Hardware hpe aruba_cx_8400 - No
Hardware hpe aruba_cx_9300_32d - No
References